topic Re: Vlan with PIX in Network Security https://community.cisco.com/t5/network-security/vlan-with-pix/m-p/88257#M647470 <HTML><HEAD></HEAD><BODY><P>Yes, you're right. The PIX does not support VLANs.</P><P>Your setup will work. You only have to understand traffic flow between both VLANs. Your setup will also work with a 515 bundle.</P><P></P><P>The only question mark I would place is the use of one switch for 2 seperate networks. Although you defined two VLANs, you put your trust into a layer 2 security. VLANs have never been built with security in mind and should be used carefully. I recommend to use two seperate switches, one for each DMZ network. </P><P>Let me know if you would like some more information regarding your configuration.</P></BODY></HTML> Thu, 07 Feb 2002 16:10:31 GMT rrbleeker 2002-02-07T16:10:31Z Vlan with PIX https://community.cisco.com/t5/network-security/vlan-with-pix/m-p/88256#M647435 <P>Correct me if I'm wrong,</P><P>PIX doesn't support VLAN right?</P><P>Even the simplest setup?</P><P></P><P>Consider the following scenario:</P><P>A 12Port Catalyst Switch split into 2 Vlans,</P><P>VLAN1 is for dmz1 network which connects directly to dmz1 interface on the PIX,</P><P>VLAN2 is for dmz2 network which connects directly to dmz2 interface on the PIX.</P><P></P><P>Can it work with a Failover PIX 515 bundle?</P><P>or do I have to get another physical switch for this setup? </P><P></P><P></P><P>Thanks for any help,</P><P></P><P>Regards,</P><P>Zeremy</P> Fri, 21 Feb 2020 05:58:23 GMT https://community.cisco.com/t5/network-security/vlan-with-pix/m-p/88256#M647435 zeremy 2020-02-21T05:58:23Z Re: Vlan with PIX https://community.cisco.com/t5/network-security/vlan-with-pix/m-p/88257#M647470 <HTML><HEAD></HEAD><BODY><P>Yes, you're right. The PIX does not support VLANs.</P><P>Your setup will work. You only have to understand traffic flow between both VLANs. Your setup will also work with a 515 bundle.</P><P></P><P>The only question mark I would place is the use of one switch for 2 seperate networks. Although you defined two VLANs, you put your trust into a layer 2 security. VLANs have never been built with security in mind and should be used carefully. I recommend to use two seperate switches, one for each DMZ network. </P><P>Let me know if you would like some more information regarding your configuration.</P></BODY></HTML> Thu, 07 Feb 2002 16:10:31 GMT https://community.cisco.com/t5/network-security/vlan-with-pix/m-p/88257#M647470 rrbleeker 2002-02-07T16:10:31Z